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Consider a function / which is defined on the integers from f to TV and takes the values —1 and 
\ +1. The parity of / is the product over all x from 1 to N of f{x). With no further information 

about /, to classically determine the parity of / requires N calls of the function /. We show that any 
quantum algorithm capable of determining the parity of / contains at least N/2 applications of the 
unitary operator which evaluates /. Thus for this problem, quantum computers cannot outperform 
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^ ■ classical computers. 
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00 ' I- INTRODUCTION 

If a quantum computer is ever built, it could be used to solve certain problems in less time than a classical computer. 
Simon found a problem that can be solved exponentially faster by a quantum computer than by the provably best 
' classical algorithm The Shor algorithm for factoring on a quantum computer gives an exponential speedup over 
the best known classical algorithm |2j). The Grover algorithm gives a speedup for the following problem ||. Suppose 
you are given a function f(x) with x an integer and 1 < x < N. Furthermore you know that / is either identically 
q-i equal to 1 or it is 1 for N — 1 of the x's and equal to —1 at one unknown value of x. The task is to determine which 
type of / you have. Without any additional information about /, classically this takes of order N calls of / whereas 
the quantum algorithm runs in time of order yfN. In fact this v^V speedup can be shown to be optimal Q. 
' It is of great interest to understand the circumstances under which quantum speedup is possible. Recently Ozhigov 
has shown that there is a situation where a quantum computer cannot outperform a classical computer || . Consider 
a function g(t), defined on the integers from 1 to L, which takes integer values from 1 to L. We wish to find the M th 
iterate of some input, say 1, that is, g [M] (l). (Here g [n] {t) = g{g [n ~ 1] (t)) and g [0] (t) = t.) Ozhigov's result is that if 
L grows at least as fast as M 7 then any quantum algorithm for evaluating the M iterate takes of order M calls of 
the unitary operator which evaluates <?; of course the classical algorithm requires M calls. Later we will show that 
our result in fact implies a stronger version of Ozhigov's with L — 2M. 

In this paper we show that a quantum computer cannot outperform a classical computer in determining the parity 
of a function; similar and additional results are obtained in |(| and . Let 

f{x) = ±l for x — 1, . . . N . (1) 

Define the parity of / by 

N 

P^(f) = l[f(x) (2) 

x = l 

so that the parity of / can be either +1 or —1. The parity of / always depends on the value of / at every point in its 
domain so classically it requires N function calls to determine the parity. The Grover problem, as described above, 
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is a special case of the parity problem where additional restrictions have been placed on the function. Although the 
Grover problem can be solved in time of order \ZjV on a quantum computer, the parity problem has no comparable 
quantum speedup. 



II. PRELIMINARIES 

We imagine that the function / whose parity we wish to determine is provided to us in the form of an ordinary 
computer program, thought of as an oracle. We then use a quantum compiler to convert this to quantum code which 
gives us the unitary operator 

U f \x,+1) = \x,f(x)) 

U f \x,-l) = \x,-f(x)) . (3) 
(Here the second register is a qubit taking the values ±1.) Defining 

\x,s) = ±(\x,+l) + \x,-l)) 

and 

\x,a) = -^(^,+1)- \ x , -1)) , (4) 

we have that 

Uf\x,q) = f(x,q)\x,q) q = s,a (5) 

where 

f(x,s) = l and f(x,a)=f(x). (6) 

Therefore in the |x, q) basis, the quantum operator Uf is multiplication by f(x,q). 
Suppose that N — 2 so that x takes only the values 1 and 2. Then 

U f (\l,a) + \2,a)) = f(l)\l,a) + f(2)\2,a) 

= /(l)(|l,a)+par(/)|2,a)) . (7) 

Now the states |l,a) + |2,a) and \l,a) — |2,a) are orthogonal so we see that one application of Uf determines the 
parity of / although classically two function calls are required. See for example ^ . In section IV this algorithm is 
generalized for the case of N to determine parity after N/2 applications of Uf. 

In writing (^) we ignored the work bits used in calculating f(x). This is because, quite generally, the work bits can 
be reset to their x independent values ||. To do this you must first copy f(x) and then run the quantum algorithm 
for evaluating f[x) backwards thereby resetting the work bits. If this is done then a single application of Uf can be 
counted as two calls of /. 

III. MAIN RESULT 

We imagine that we have a quantum algorithm for determining the parity of a function /. The Hilbert space we are 
working in may be much larger than the 27V-dimensional space spanned by the vectors \x, q) previously described. The 
algorithm is a sequence of unitary operators which acts on an initial vector \ifio) and produces IV'/)- The Hilbert space 
is divided into two orthogonal subspaces by a projection operator V . After producing 1^/); we measure V obtaining 
either 0, corresponding to parity —1, or 1, corresponding to parity +1. (Note that (V'/I^'IV'/) is the probability of 
obtaining 1.) We say that the algorithm is successful if there is an e > such that 

For par (/) = +1, (V> <f\V\i\> /) > i + e 

and 

For par (g) = -1, {ip g \V\^ g ) <\-e. (8) 
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This is a weak definition of success for an algorithm — we only ask that the probability of correctly identifying the 
parity of / be greater than | no matter what / is. Since we are proving the nonexistence of a successful (short) 
algorithm, our result is correspondingly strong. 

The algorithm is a sequence of unitary operators, some of which are independent of /, and some of which depend 
on / through the application of a generalization of (||). We need to generalize (||) because we are working in a larger 
Hilbert space. In this larger Hilbert space there are still subspaces associated with x and q. (In other words, there is 
a basis of the form \x, q, w) where x = 1, . . . N and q = a,s and w = 1, . . . W for some W, corresponding to the values 
of the work bits that the algorithm may use.) Accordingly there are projection operators P x and P q which obey 

N 

Pi = P x ; P x P y = 0fon^; J2 P * = 1 

x=l 

and 

P 2 q =P q - P s P a = 0; Yl P i = 1 • ( 9 ) 

q—s,a 

In terms of these projectors we have 

[//^^/(.m)^, (10) 

x q 

where the sum over x is from 1 to N and the q sum is over s and a. 

An algorithm which contains k applications of Ut, acting on \ipo), produces 

|V;/) = V k U f V k -xU } . . . VxU f \<4> Q ) (11) 

where V\ through V k are unitary operators independent of /, but which may involve the work bits. For more extensive 
discussion, see E3|. 

We will now use (|l0|) to put {ip f\V\ip f) in a form where we can see explicitly how it depends on /, allowing us to 
show that (|^) is impossible if k is too small. We have 

2k 

(lpf\V\i>f) = J2Y,--- A (xu<li---X2k,q2k)Y[f(x l ,q l ) (12) 

Xiqi X 2 q2 x 2k q 2 k i=l 

where 

A( Xl ,qi . . . X2 k ,q2k) - {MP^PiM ■ ■ ■ Vlw k . . . ViP X2h P q2h |^o) • (13) 

Note that A does not depend on /. 

There are 2 N different possible /'s of the form given by ([!]). We now sum over all these functions and compute 

2k N 

X)<^/W/)par(/) = X;E--- E A{x 1 ,q 1 ...x 2kl q 2k )\{f{x l ,q i )\{f(y) . (14) 

/ / Xiqi x 2k q 2k i=l y=l 

Note that 

J2f(z)=0 for 2 = 1,. ..N (15) 
/ 

because for each function with f(z) = +1 there is a function with f(z) = — 1. Similarly if Z\, z 2 ■ ■ ■ z n are all distinct, 
we have 

J2f(z 1 )f(z 2 )...f(z n ) = 0. (16) 
/ 

Return to ( |l4| ) and consider the sum on /, 
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2k N 

e n/(*i.»)ii/(f) 



where xi, X2 . . . £2fc and qi,q2 ■ ■ ■ q2k are fixed. For any i with g, = s we have /(a;*, s) = 1. Thus fll7| ) equals 

N 

e n fwuftv)- ( is ) 

g^ = a 

Now / 2 (z) = 1 for any 2 and any /. By ([l6]), the sum over / in ( |l8| ) will give unless each term in the second product 
can be matched to a term in the first product. Since the first product has at most 2k terms and the second product 



has N terms, we see that if 2k < N then the sum over / in (18) is and accordingly. 



This implies that for 2k < N 



J^/W/>par(/)=0. (19) 
/ 



E (^/W/> = E ^f\v\^f) ( 2 °) 

/,par (/)=+! /,par (/)=-! 



which means that for k < N/2 condition (g) cannot be fulfilled. 

Equation (pfj| ) shows that our bound holds even if we further relax the success criterion given in condition (||). In 
any algorithm with fewer than N/2 applications of Uf, demanding a probability of success greater than or equal to 
1/2 for every / forces the probability to be 1/2 for every /. 



IV. AN OPTIMAL ALGORITHM 



To see that the bound k < N/2 is optimal, we now show how to solve the parity problem with N/2 applications of 
U f. Here we assume that N is even. We only need the states \x, a) given in ([|) for which 



Define 



U f \x,a) =f(x)\x,a) . (21) 

V\x,a) = \x + I, a) x=l,...§-l 
V\%,a) = \l,a) 

V\x, a) = \x + 1, a) x = § + l,...N-l 

V\N,a) = \f + l,a) (22) 

Also let 

1 N 

i^) = ^Ei a; ' a ) ■ ( 23 ) 



x=l 

Now compute \ipf) given by ([l^) with k = N/2 and for the operators independent of / take 

Vi = V 2 = ... = V k -i = V and V k = 1 . 

We then have that 

N/2 N 

i^) = -w(i)/(2) . . . /(f) E \*> a ) + 7^/(f + j )/(t + 2 ) • ■ ■ W) E 

X= T +1 



|x,a). (24) 



Therefore if par(/) = +1, the state \ip*) is proportional to \tpo) whereas if par (/) = —1, then \ipf) is orthogonal to 
\ipa). For the parity projection operator we take V = |^>o)(V'o| an( i we see that the algorithm determines the correct 
parity all the time. Similarly we can show that if N is odd, then with k = (N + l)/2 applications of Ut we can 
determine the parity of /, but this time we need the states \x, s) as well as \x, a). 
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V. PARITY AS ITERATED FUNCTION EVALUATION 



Here we are interested in evaluating the N iterate of a function which maps a set of size 2N to itself. We show 
that it is impossible for a quantum computer to solve this problem with fewer than N/2 applications of the unitary 
operator corresponding to the function. As noted above, this is a considerable strengthening of Ozhigov's result. 

We assume an algorithm satisfying the above conditions exists and we obtain a contradiction. Let the set of 2N 
elements be {(cc, r)} where x = 1, ... N and r = ±1. For any / of the form (|l]) define 

g(x,r) = (x + l,rf(x)) (25) 

where we interpret N + 1 as 1. Note that 

S M(l,l) = (l,par(/)). (26) 

Thus an algorithm which computes the ./V th iterate of g with fewer than N/2 applications of the corresponding unitary 
operator would in fact solve the parity problem impossibly fast. 



VI. CONCLUSION 



Grover's result raised the possibility that any problem involving a function with TV inputs could be solved quantum 
mechanically with only y/~N applications of the corresponding operator. We have shown that this is not the case. For 
the parity problem, N/2 applications of the quantum operator are required. 
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